My bad. One should enable on the ASA: vpn-addr-assign aaa Duh. Then it works using standard attributes "Framed-IP-Address" and so on. Wishing a nice evening, Marki On 10/5/2021 4:48 PM, Marki wrote:

Hello,

Would you know how to set a static IP address for a remote access connection on Cisco ASA?

I tried using standard reply attributes "Framed-IP-Address" and "Framed-IP-Netmask", but it's just ignoring those without a specific error.

Looking at table 34-2 here: https://www.cisco.com/c/en/us/td/docs/security/asa/asa91/configuration/gener... this comes as no surprise as they mention an attribute called "IETF-Radius-Framed-IP-Address" but don't associate it to an attribute number.

I have looked at /usr/share/freeradius/dictionary.cisco.asa but don't find anything that looks appropriate.

It can't be that difficult setting a static IP, there is just no documentation anywhere.

Surely someone has done this before?

Thanks, Marki